@gh-symphony/cli 0.4.4 → 0.4.6

package/README.md

@@ -8,6 +8,9 @@ The following tools must be installed before using the CLI:
 
 - **[Node.js](https://nodejs.org/)** (v24+) with npm
 - **[Git](https://git-scm.com/)**
+- At least one AI agent runtime on `PATH` before `gh-symphony repo start`:
+  - **[Codex CLI](https://developers.openai.com/codex/cli/)** (`codex`) - install from the official Codex CLI guide, then authenticate with `codex login`.
+  - **[Claude Code](https://code.claude.com/docs/en/quickstart)** (`claude`) - install from the official Claude Code quickstart, then authenticate with `ANTHROPIC_API_KEY` or a local Claude login for non-bare runs.
 - One GitHub auth source with required scopes (`repo`, `read:org`, `project`):
   - **[GitHub CLI (`gh`)](https://cli.github.com/)**:
     ```bash
@@ -106,7 +109,7 @@ Examples of generated validation guidance include `make test`, `just build`, `uv
 
 You can further customize the agent's behavior by editing `WORKFLOW.md` — this is the policy layer that controls what the agent does at each workflow phase.
 
-> Currently supported runtimes: **Codex**, **Claude Code**
+> Currently supported runtimes: **[Codex CLI](https://developers.openai.com/codex/cli/)** and **[Claude Code](https://code.claude.com/docs/en/quickstart)**. The selected runtime command must be installed and authenticated before `gh-symphony repo start` can dispatch worker runs.
 
 ### Explicit Priority Mapping
 

package/dist/{chunk-4ZHWEQQL.js → chunk-DENDF6S6.js}

@@ -16,7 +16,7 @@ import {
   formatClaudePreflightText,
   resolveClaudeCommandBinary,
   runClaudePreflight
-} from "./chunk-LJUEOVAQ.js";
+} from "./chunk-RGCSM2KZ.js";
 
 // src/mapping/smart-defaults.ts
 var ROLE_PATTERNS = [

package/dist/{chunk-34YCGQD2.js → chunk-EILO332E.js}

@@ -4,7 +4,7 @@ import {
 } from "./chunk-3IRPSPAF.js";
 import {
   parseWorkflowMarkdown
-} from "./chunk-LJUEOVAQ.js";
+} from "./chunk-RGCSM2KZ.js";
 import {
   saveGlobalConfig,
   saveProjectConfig

package/dist/{chunk-I3CZXKS5.js → chunk-FBJRJWE5.js}

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import {
   workflow_init_default
-} from "./chunk-4ZHWEQQL.js";
+} from "./chunk-DENDF6S6.js";
 import {
   fetchGithubProjectIssueByRepositoryAndNumber,
   inspectManagedProjectSelection,
   resolveTrackerAdapter
-} from "./chunk-HHBXGE23.js";
+} from "./chunk-RMNLHTIK.js";
 import {
   GitHubApiError,
   createClient,
@@ -19,7 +19,7 @@ import {
   buildPromptVariables,
   parseWorkflowMarkdown,
   renderPrompt
-} from "./chunk-LJUEOVAQ.js";
+} from "./chunk-RGCSM2KZ.js";
 import {
   loadActiveProjectConfig
 } from "./chunk-YZP5N5XP.js";

package/dist/{chunk-LJUEOVAQ.js → chunk-RGCSM2KZ.js}

@@ -6619,6 +6619,7 @@ export {
   readJsonFile,
   safeReadDir,
   isFileMissing,
+  formatEventMessage,
   parseRecentEvents,
   redactObservabilitySecrets,
   redactObservabilityDiagnosticsWithStats,

package/dist/{chunk-HHBXGE23.js → chunk-RMNLHTIK.js}

@@ -30,7 +30,7 @@ import {
   resolveWorkflowRuntimeTimeouts,
   safeReadDir,
   scheduleRetryAt
-} from "./chunk-LJUEOVAQ.js";
+} from "./chunk-RGCSM2KZ.js";
 import {
   loadGlobalConfig,
   loadProjectConfig

package/dist/{chunk-QBBJMCNC.js → chunk-XLDJTMW5.js}

@@ -10,17 +10,14 @@ import {
   resolveGitHubGraphQLToken,
   shouldReuseAgentCredentialCache,
   writeAgentCredentialCache
-} from "./chunk-LJUEOVAQ.js";
+} from "./chunk-RGCSM2KZ.js";
 
 // ../runtime-codex/src/runtime.ts
 import { spawn } from "child_process";
-import { copyFile, mkdir, readFile, writeFile } from "fs/promises";
-import { join } from "path";
-import { homedir } from "os";
+import { readFile, writeFile } from "fs/promises";
 import { fileURLToPath } from "url";
 var DEFAULT_GITHUB_GIT_HOST = "github.com";
 var DEFAULT_GITHUB_GIT_USERNAME = "x-access-token";
-var STAGED_CODEX_HOME_DIRNAME = ".codex-agent";
 var DIRECT_AGENT_ENV_KEYS = [
   "OPENAI_API_KEY",
   "OPENAI_BASE_URL",
@@ -287,20 +284,13 @@ function normalizeCodexRuntimeEvents(message) {
   }
   return events;
 }
-function resolveStagedCodexHome(workingDirectory) {
-  return join(workingDirectory, STAGED_CODEX_HOME_DIRNAME);
-}
-function resolvePreparedAgentEnvironment(workingDirectory, env) {
-  const preparedEnv = Object.fromEntries(
+function resolvePreparedAgentEnvironment(env) {
+  return Object.fromEntries(
     DIRECT_AGENT_ENV_KEYS.flatMap((key) => {
       const value = env?.[key];
       return typeof value === "string" && value.length > 0 ? [[key, value]] : [];
     })
   );
-  return {
-    ...preparedEnv,
-    CODEX_HOME: resolveStagedCodexHome(workingDirectory)
-  };
 }
 function buildCodexRuntimePlan(config) {
   const githubTool = createGitHubGraphQLToolDefinition(config);
@@ -317,10 +307,7 @@ function buildCodexRuntimePlan(config) {
     const cmd = config.agentCommand ?? "codex app-server";
     return cmd.startsWith("bash -lc ") ? cmd.slice("bash -lc ".length) : cmd;
   })();
-  const agentEnv = resolvePreparedAgentEnvironment(
-    config.workingDirectory,
-    config.agentEnv
-  );
+  const agentEnv = resolvePreparedAgentEnvironment(config.agentEnv);
   const linearGraphqlEnv = config.enableLinearGraphqlTool ? {
     LINEAR_GRAPHQL_TOOL_NAME: "linear_graphql",
     LINEAR_GRAPHQL_URL: config.linearGraphqlUrl ?? DEFAULT_LINEAR_GRAPHQL_URL,
@@ -385,7 +372,6 @@ var CodexRuntimeAdapter = class {
       this.dependencies,
       this
     );
-    await stageCodexHome(this.config, this.dependencies);
     this.plan = buildCodexRuntimePlan({
       ...this.config,
       agentEnv
@@ -418,10 +404,7 @@ var CodexRuntimeAdapter = class {
     };
   }
   resolveCredentials(brokerResponse) {
-    return resolvePreparedAgentEnvironment(
-      this.config.workingDirectory,
-      brokerResponse.env
-    );
+    return resolvePreparedAgentEnvironment(brokerResponse.env);
   }
   async shutdown() {
     terminateChildProcess(this.child);
@@ -477,10 +460,10 @@ function createGitCredentialHelperEnvironment(config) {
 }
 async function resolveAgentRuntimeEnvironment(config, dependencies = {}, adapter) {
   if (config.agentEnv) {
-    return resolveRuntimeCredentials(config, { env: config.agentEnv }, adapter);
+    return resolveRuntimeCredentials({ env: config.agentEnv }, adapter);
   }
   if (!config.agentCredentialBrokerUrl || !config.agentCredentialBrokerSecret) {
-    return resolvePreparedAgentEnvironment(config.workingDirectory);
+    return resolvePreparedAgentEnvironment();
   }
   const now = dependencies.now ?? /* @__PURE__ */ new Date();
   const readFileImpl = dependencies.readFileImpl ?? readFile;
@@ -489,7 +472,7 @@ async function resolveAgentRuntimeEnvironment(config, dependencies = {}, adapter
     readFileImpl
   ) : null;
   if (cachedCredentials && shouldReuseAgentCredentialCache(cachedCredentials, now)) {
-    return resolveRuntimeCredentials(config, cachedCredentials, adapter);
+    return resolveRuntimeCredentials(cachedCredentials, adapter);
   }
   const fetchImpl = dependencies.fetchImpl ?? fetch;
   const response = await fetchImpl(config.agentCredentialBrokerUrl, {
@@ -503,7 +486,7 @@ async function resolveAgentRuntimeEnvironment(config, dependencies = {}, adapter
   const resolvedEnv = payload.env && response.ok ? adapter ? adapter.resolveCredentials({
     env: payload.env,
     expires_at: payload.expires_at
-  }) : resolvePreparedAgentEnvironment(config.workingDirectory, payload.env) : null;
+  }) : resolvePreparedAgentEnvironment(payload.env) : null;
   if (!response.ok || !payload.env || Object.keys(payload.env).length === 0 || !resolvedEnv) {
     throw new AgentRuntimeResolutionError(
       payload.error ?? `Agent credential broker request failed with status ${response.status}.`
@@ -520,31 +503,8 @@ async function resolveAgentRuntimeEnvironment(config, dependencies = {}, adapter
   }
   return resolvedEnv;
 }
-function resolveRuntimeCredentials(config, brokerResponse, adapter) {
-  return adapter ? adapter.resolveCredentials(brokerResponse) : resolvePreparedAgentEnvironment(
-    config.workingDirectory,
-    brokerResponse.env
-  );
-}
-async function stageCodexHome(config, dependencies = {}) {
-  const codexHomeDir = resolveStagedCodexHome(config.workingDirectory);
-  const mkdirImpl = dependencies.mkdirImpl ?? mkdir;
-  await mkdirImpl(codexHomeDir, { recursive: true });
-  const writeFileImpl = dependencies.writeFileImpl ?? writeFile;
-  await writeFileImpl(
-    join(codexHomeDir, "config.toml"),
-    "# Isolated agent config \u2014 no personal MCP servers\n",
-    "utf8"
-  );
-  const realCodexHome = process.env.CODEX_HOME ?? join(homedir(), ".codex");
-  const copyFileImpl = dependencies.copyFileImpl ?? copyFile;
-  try {
-    await copyFileImpl(
-      join(realCodexHome, "auth.json"),
-      join(codexHomeDir, "auth.json")
-    );
-  } catch {
-  }
+function resolveRuntimeCredentials(brokerResponse, adapter) {
+  return adapter ? adapter.resolveCredentials(brokerResponse) : resolvePreparedAgentEnvironment(brokerResponse.env);
 }
 function hasRunningChild(child) {
   return child !== null && child.exitCode === null && child.signalCode === null;
@@ -583,6 +543,7 @@ function resolveLocalRuntimeLaunchConfig(env = process.env) {
     githubTokenBrokerSecret: env.GITHUB_TOKEN_BROKER_SECRET,
     githubTokenCachePath: env.GITHUB_TOKEN_CACHE_PATH,
     agentEnv: readDirectAgentEnvironment(env),
+    extraEnv: env.CODEX_HOME ? { CODEX_HOME: env.CODEX_HOME } : void 0,
     agentCredentialBrokerUrl: env.AGENT_CREDENTIAL_BROKER_URL,
     agentCredentialBrokerSecret: env.AGENT_CREDENTIAL_BROKER_SECRET,
     agentCredentialCachePath: env.AGENT_CREDENTIAL_CACHE_PATH,

package/dist/{doctor-Y2AZZKGW.js → doctor-YV5NV4HX.js}

@@ -5,14 +5,14 @@ import {
   parseIssueReference,
   readGitHubProjectBinding,
   renderIssueWorkflowPreview
-} from "./chunk-I3CZXKS5.js";
-import "./chunk-4ZHWEQQL.js";
+} from "./chunk-FBJRJWE5.js";
+import "./chunk-DENDF6S6.js";
 import {
   fetchGithubProjectIssueByRepositoryAndNumber,
   fetchGithubProjectIssues,
   inspectManagedProjectSelection
-} from "./chunk-HHBXGE23.js";
-import "./chunk-QBBJMCNC.js";
+} from "./chunk-RMNLHTIK.js";
+import "./chunk-XLDJTMW5.js";
 import {
   resolveRuntimeRoot
 } from "./chunk-3IRPSPAF.js";
@@ -40,7 +40,7 @@ import {
   resolveClaudeCommandBinary,
   resolveRuntimeCommandBinary,
   runClaudePreflight
-} from "./chunk-LJUEOVAQ.js";
+} from "./chunk-RGCSM2KZ.js";
 import {
   configFilePath,
   orchestratorLogPath,
@@ -1886,10 +1886,18 @@ ${DOCTOR_USAGE}`);
 }
 function buildRuntimeInstallGuidance(binary, platform) {
   if (binary === "codex") {
-    return "Install Codex CLI using its official installation instructions and ensure 'codex' is on PATH.";
+    return [
+      "Install Codex CLI from https://developers.openai.com/codex/cli/",
+      "and ensure 'codex' is on PATH.",
+      "Then authenticate with 'codex login'."
+    ].join(" ");
   }
   if (binary === "claude" || binary === "claude-code") {
-    return "Install Claude Code using its official installation instructions and ensure the runtime binary is on PATH.";
+    return [
+      "Install Claude Code from https://code.claude.com/docs/en/quickstart",
+      "and ensure the runtime binary is on PATH.",
+      "Then set ANTHROPIC_API_KEY or complete a local Claude login for non-bare runs."
+    ].join(" ");
   }
   if (platform === "win32" && binary) {
     return `Install '${binary}' using its official installation instructions and ensure the directory containing '${binary}.exe' is on PATH.`;

package/dist/index.js

@@ -417,13 +417,13 @@ function createRemovedCommandHandler(message) {
 
 // src/index.ts
 var COMMANDS = {
-  workflow: () => import("./workflow-TQ7UZPGP.js"),
-  setup: () => import("./setup-DMYXHOCB.js"),
-  doctor: () => import("./doctor-Y2AZZKGW.js"),
-  upgrade: () => import("./upgrade-FJXX733J.js"),
-  repo: () => import("./repo-2NS2AU3D.js"),
+  workflow: () => import("./workflow-WG55ZIZ6.js"),
+  setup: () => import("./setup-IJMKV5YA.js"),
+  doctor: () => import("./doctor-YV5NV4HX.js"),
+  upgrade: () => import("./upgrade-TS42ZOSU.js"),
+  repo: () => import("./repo-LBNPFDDF.js"),
   config: () => import("./config-cmd-OIVIUKG7.js"),
-  version: () => import("./version-FYAZ57WO.js")
+  version: () => import("./version-QXB4FBVW.js")
 };
 function addGlobalOptions(command) {
   return command.option("--config <dir>", "Config directory").addOption(new Option("--config-dir <dir>").hideHelp()).option("-v, --verbose", "Enable verbose output").option("--json", "Output in JSON format").option("--no-color", "Disable color output");

package/dist/{repo-2NS2AU3D.js → repo-LBNPFDDF.js}

@@ -17,7 +17,7 @@ import {
 import {
   initRepoRuntime,
   parseRepoRuntimeFlags
-} from "./chunk-34YCGQD2.js";
+} from "./chunk-EILO332E.js";
 import {
   OrchestratorService,
   acquireProjectLock,
@@ -33,8 +33,8 @@ import {
   resolveOrchestratorLogLevel,
   resolveTrackerAdapter,
   runCli
-} from "./chunk-HHBXGE23.js";
-import "./chunk-QBBJMCNC.js";
+} from "./chunk-RMNLHTIK.js";
+import "./chunk-XLDJTMW5.js";
 import {
   resolveRepoRuntimeRoot,
   resolveRuntimeRoot
@@ -52,13 +52,14 @@ import {
 import {
   WorkflowConfigStore,
   deriveIssueWorkspaceKeyFromIdentifier,
+  formatEventMessage,
   isFileMissing,
   isMatchingIssueRun,
   mapIssueOrchestrationStateToStatus,
   parseRecentEvents,
   readJsonFile,
   safeReadDir
-} from "./chunk-LJUEOVAQ.js";
+} from "./chunk-RGCSM2KZ.js";
 import {
   daemonPidPath,
   httpStatusPath,
@@ -121,9 +122,11 @@ var handler = async (args, options) => {
       const lines = content.trim().split("\n").filter(Boolean);
       for (const line of lines) {
         const event = JSON.parse(line);
-        if (parsed.projectId && event.projectId !== parsed.projectId) continue;
-        if (parsed.level && event.level !== parsed.level) continue;
-        if (parsed.issue && event.issueIdentifier !== parsed.issue) continue;
+        if (parsed.projectId && getProjectId(event) !== parsed.projectId)
+          continue;
+        if (parsed.level && getLevel(event) !== parsed.level) continue;
+        if (parsed.issue && getIssueIdentifier(event) !== parsed.issue)
+          continue;
         process.stdout.write(formatEvent(event) + "\n");
       }
     } catch {
@@ -177,6 +180,7 @@ var handler = async (args, options) => {
   }
   const runRoots = parsed.projectId ? [join(runtimeRoot, "projects", parsed.projectId, "runs")] : await listProjectRunRoots(runtimeRoot);
   let foundRuns = false;
+  const events = [];
   try {
     for (const runsDir of runRoots) {
       const entries = await safeReadDir2(runsDir);
@@ -191,11 +195,12 @@ var handler = async (args, options) => {
           const lines = content.trim().split("\n").filter(Boolean);
           for (const line of lines) {
             const event = JSON.parse(line);
-            if (parsed.projectId && event.projectId !== parsed.projectId)
+            if (parsed.projectId && getProjectId(event) !== parsed.projectId)
+              continue;
+            if (parsed.level && getLevel(event) !== parsed.level) continue;
+            if (parsed.issue && getIssueIdentifier(event) !== parsed.issue)
               continue;
-            if (parsed.level && event.level !== parsed.level) continue;
-            if (parsed.issue && event.issueIdentifier !== parsed.issue) continue;
-            process.stdout.write(formatEvent(event) + "\n");
+            events.push(event);
           }
         } catch {
         }
@@ -205,15 +210,33 @@ var handler = async (args, options) => {
   }
   if (!foundRuns) {
     process.stderr.write("No runs found. Start the orchestrator first.\n");
+    return;
+  }
+  events.sort(
+    (left, right) => String(left.at ?? "").localeCompare(String(right.at ?? ""))
+  );
+  for (const event of events) {
+    process.stdout.write(formatEvent(event) + "\n");
   }
 };
 var logs_default = handler;
 function formatEvent(event) {
   const at = event.at ?? "";
   const eventType = event.event ?? "unknown";
-  const issue = event.issueIdentifier ?? "";
-  const extra = event.error ? ` error=${event.error}` : "";
-  return `[${at}] ${eventType} ${issue}${extra}`;
+  const issue = getIssueIdentifier(event);
+  const message = formatEventMessage(event);
+  const subject = issue ? ` ${issue}` : "";
+  const extra = message ? ` ${message}` : "";
+  return `[${at}] ${eventType}${subject}${extra}`;
+}
+function getProjectId(event) {
+  return typeof event.projectId === "string" ? event.projectId : void 0;
+}
+function getLevel(event) {
+  return typeof event.level === "string" ? event.level : void 0;
+}
+function getIssueIdentifier(event) {
+  return typeof event.issueIdentifier === "string" ? event.issueIdentifier : "";
 }
 async function listProjectRunRoots(runtimeRoot) {
   const roots = [join(runtimeRoot, "runs")];

package/dist/{setup-DMYXHOCB.js → setup-IJMKV5YA.js}

@@ -16,10 +16,10 @@ import {
   warnDeprecatedSkipContext,
   writeEcosystem,
   writeWorkflowPlan
-} from "./chunk-4ZHWEQQL.js";
+} from "./chunk-DENDF6S6.js";
 import {
   initRepoRuntime
-} from "./chunk-34YCGQD2.js";
+} from "./chunk-EILO332E.js";
 import "./chunk-3IRPSPAF.js";
 import {
   GhAuthError,
@@ -33,7 +33,7 @@ import {
   listUserProjects,
   validateToken
 } from "./chunk-SMNIGNS3.js";
-import "./chunk-LJUEOVAQ.js";
+import "./chunk-RGCSM2KZ.js";
 import "./chunk-YZP5N5XP.js";
 
 // src/commands/setup.ts

package/dist/{upgrade-FJXX733J.js → upgrade-TS42ZOSU.js}

@@ -16,8 +16,8 @@ function execFileAsync(file, args, execFileImpl = execFileCallback) {
   });
 }
 function resolveCurrentCliVersion() {
-  if ("0.4.4".length > 0) {
-    return "0.4.4";
+  if ("0.4.6".length > 0) {
+    return "0.4.6";
   }
   const pkg = JSON.parse(
     readFileSync(new URL("../../package.json", import.meta.url), "utf8")

package/dist/{version-FYAZ57WO.js → version-QXB4FBVW.js}

@@ -2,7 +2,7 @@
 
 // src/commands/version.ts
 var handler = async (_args, options) => {
-  const version = "0.4.4";
+  const version = "0.4.6";
   if (options.json) {
     process.stdout.write(JSON.stringify({ version }) + "\n");
   } else {

package/dist/worker-entry.js

@@ -6,7 +6,7 @@ import {
   normalizeCodexRuntimeEvents,
   prepareCodexRuntimePlan,
   resolveLocalRuntimeLaunchConfig
-} from "./chunk-QBBJMCNC.js";
+} from "./chunk-XLDJTMW5.js";
 import {
   DEFAULT_AGENT_INPUT_REQUIRED_REASON,
   classifySessionExit,
@@ -17,7 +17,7 @@ import {
   resolveClaudeCommandBinary,
   resolveWorkflowRuntimeCommand,
   runClaudePreflight
-} from "./chunk-LJUEOVAQ.js";
+} from "./chunk-RGCSM2KZ.js";
 
 // ../worker/src/index.ts
 import { spawn as spawn2 } from "child_process";

package/dist/{workflow-TQ7UZPGP.js → workflow-WG55ZIZ6.js}

@@ -6,12 +6,12 @@ import {
   resetWorkflowCommandDependenciesForTest,
   setWorkflowCommandDependenciesForTest,
   workflow_default
-} from "./chunk-I3CZXKS5.js";
-import "./chunk-4ZHWEQQL.js";
-import "./chunk-HHBXGE23.js";
-import "./chunk-QBBJMCNC.js";
+} from "./chunk-FBJRJWE5.js";
+import "./chunk-DENDF6S6.js";
+import "./chunk-RMNLHTIK.js";
+import "./chunk-XLDJTMW5.js";
 import "./chunk-SMNIGNS3.js";
-import "./chunk-LJUEOVAQ.js";
+import "./chunk-RGCSM2KZ.js";
 import "./chunk-YZP5N5XP.js";
 export {
   workflow_default as default,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gh-symphony/cli",
-  "version": "0.4.4",
+  "version": "0.4.6",
   "license": "MIT",
   "author": "hojinzs",
   "description": "Interactive CLI for GitHub Symphony orchestration",
@@ -41,13 +41,13 @@
   },
   "devDependencies": {
     "tsup": "^8.5.1",
-    "@gh-symphony/control-plane": "0.0.15",
+    "@gh-symphony/core": "0.0.14",
     "@gh-symphony/dashboard": "0.0.14",
+    "@gh-symphony/orchestrator": "0.0.14",
     "@gh-symphony/tracker-github": "0.0.14",
-    "@gh-symphony/core": "0.0.14",
-    "@gh-symphony/worker": "0.0.14",
     "@gh-symphony/runtime-claude": "0.0.14",
-    "@gh-symphony/orchestrator": "0.0.14"
+    "@gh-symphony/worker": "0.0.14",
+    "@gh-symphony/control-plane": "0.0.15"
   },
   "scripts": {
     "build": "tsup",